A licence key for each person
Each member of staff has their own private licence key. The business owner adds and removes staff, and access to online features is checked on every request.
Security
Secure by design.
Our software is built so we never need to hold your clients’ bank statements. This is how client data is handled, step by step.
The privacy filter
Six steps on your computer before anything is sent.
To categorise payments, the software sends merchant descriptions to an AI service. A privacy filter runs first, on your computer.
What comes back is a category and flag label for each merchant. The software then calculates every figure itself.
- Read on your computer.The statement file is opened and its transactions extracted locally.
- Identify the applicant.Names, account numbers and sort codes are taken from the statement.
- Remove identifiers.Those details are stripped from every description. Any that remain are replaced with placeholders. The key to reverse them stays in memory and is never saved or sent.
- Withhold sensitive payments.Transfers to people, and payments that reveal health, religion, politics or union membership, are not sent at all. They go to your review.
- Check, and stop if in doubt.The filter re-checks its own output. If a known identifier remains, nothing is sent.
- Send merchant descriptions only.Over an encrypted connection. A tamper-evident record of each batch is kept on your computer.
Access
Who can reach what.
Password-protected accounts
Staff sign in to the app with their own account. Client records sit in the app’s local database on your computer.
Sharing stays inside your business
Only confirmed merchant categories are shared between colleagues. Client statements are never shared.
We hold no client statements
Statements, transactions and reports stay with you. We see licensing and usage information needed to run the service.
Responsibilities
Clear roles under UK GDPR.
Your business decides how its clients’ information is used, so it is the controller for that data. We process it only to provide the software, under a written agreement.
For our own customer administration, the data controller is Nathan Tracey, ICO registration ZC291698.
We do not currently hold ISO 27001, SOC 2 or Cyber Essentials certification. Removing identifiers reduces what is sent; it does not guarantee a description is anonymous.
Questions about data protection?
Ask us anything about how client data is handled. A person will contact you.